DORA (Digital Operational Resilience Regulation) is a European Union Regulation (EU) 2022/2554 (Digital Operational Resilience Act, DORA) that came into force on 17 January 2025. It aims to strengthen the resilience of the financial sector, manage ICT (Information and Communication Technology) risks and improve incident reporting. The regulation applies to banks, insurance companies, electronic money and payment institutions, crowdfunding providers, investment firms and other financial sector players.
DORA sets strict requirements for businesses to ensure they can withstand, respond to and recover from ICT disruptions and threats. The regulation applies to all EU member states and covers ICT risk management, incident reporting, operational resilience testing and monitoring of third-party services.
How do we assess and implement compliance with DORA?
NRD Cyber Security works with the financial sector, understands its specific needs and challenges, and is a trusted partner in the implementation of DORA, ensuring full compliance with regulatory requirements and applying state-of-the-art security solutions.
The DORA Compliance Assessment is performed in 2 phases by our experts.
The first phase consists of:
- Assessment of compliance with the DORA regulation;
- Assessment of the ICT (Information and Communication Technology) risk management technical standard.
The second phase is to make and present recommendations.
We ensure the implementation of DORA compliance through clear responsibilities and accountabilities for the CISO function within the organisation, including:
- Documentation preparation and consultancy,
- Implementation of security controls,
- Communication with and control of third parties
- Selection and maintenance of technology solutions,
- Incident management support,
- Infrastructure monitoring,
- Other agreed work.
Benefits for organisation
Compliance with Bank of Lithuania regulations and mitigation of legal risks
Business continuity assurance
Better management of third party risks
The most common questions relate to the regulation of the financial sector:
What is MiCA and what impact does it have on the cryptocurrency market?
MiCA (Markets in Crypto-Assets) is an EU regulation aimed at regulating the cryptocurrency market to ensure transparency, consumer protection and financial stability.
This regulation will affect the cryptocurrency market through the creation of:
licensing – cryptocurrency service providers will be required to obtain a licence to operate in the EU,
stablecoins – will be more strictly regulated to protect the market from volatility,
market transparency – disclosure requirements that will reduce investor risk.
